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Abstract 

This work develops a formal framework for specifying, implementing, and analysing quantum communication 
protocols. We provide tools for developing simple proofs and analysing programs which involve communi- 
cation, both via quantum channels and exhibiting the LOCC (local operations, classical communication) 
paradigm. 
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1 Introduction 

The term quantum communication refers to the process of transferring a quantum 
state between distinct physical locations. There are two ways of accomplishing this 
task. The first one is analogous to classical communication and involves sending a 
quantum bit over a quantum communication channel (just as classical communica- 
tion is associated with sending classical bits over a classical communication chan- 
nel). The second one has no classical analogue. In a quantum world it is possible 
to transfer a quantum bit without utilising a quantum channel, by using a classi- 
cal communication channel and a pair of entangled states and applying quantum 
operations locally. 

This work develops a formal framework for specifying, implementing, and 
analysing quantum communication protocols. We provide tools for developing sim- 
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pie proofs and analysing programs which involve communication, both via quan- 
tum channels and exhibiting the LOCC (local operations, classical communication) 
paradigm. We look at quantum communication in the context of formal methods of 
program development, or programming methodology. This is the field of computer 
science concerned with applications of mathematics and logic to software engineering 
tasks. In particular, the formal methods provide tools to formally express specifica- 
tions, prove correctness of implementations, and reason about various properties of 
specifications (e.g. implementability) and of implementations (e.g. time and space 
complexity) . 

In this work the analysis of quantum communication protocols is based on 
quantum predicative programming ([22,23,21]), a recent generalisation of the well- 
established predicative programming ([14,15]). It supports the style of program 
development in which each programming step is proved correct as it is made. We 
inherit the advantages of the theory, such as its generality, simple treatment of 
recursive programs, and of time and space complexity. The theory of quantum pro- 
gramming provides tools to write both classical and quantum specifications, develop 
quantum programs that implement these specifications, and reason about their com- 
parative time, space, and communication complexity, all in the same framework. 

There has been a number of proposals for formal approaches to quantum pro- 
gramming, including the language qGCL [19,27], process algebraic approaches 
of [4,17,16], tools developed in the field of category theory [1,2,3,10,20], functional 
languages of [6,7,5,24], as well as work of [12], [11], and [13]. A detailed discussion 
of the work related to quantum predicative programming is presented in [22]. 

The contribution of this work is twofold. Firstly, we present a framework for im- 
plementing quantum communication protocols, specifying desired properties of the 
protocols, and formally proving whether these properties hold. The properties are 
not restricted to reasoning about the data sent or received by the parties involved. 
We provide tools to prove properties which deal with the complexity of the pro- 
tocol, such as the number of classical and quantum bits sent during its execution. 
Secondly, the reasoning about quantum communication fits nicely in the general 
framework of quantum predicative programming, and thus inherits all of its advan- 
tages. The definitions of specification and program are simple: a specification is a 
boolean (or probabilistic) expression and a program is a specification. The treat- 
ment of recursion is simple: there is no need for additional semantics of loops. The 
treatment of termination simply follows from the introduction of a time variable; if 
the final value of the time variable is oo, then the program is a non-terminating one. 
There is a uniform method for proving correctness and time, space, and commu- 
nication complexity; moreover, after proving them separately, we naturally obtain 
the conjunction. The use of Dirac-like notation makes it easy to write down specifi- 
cations and develop algorithms. Finally, the treatment of computation with mixed 
states does not require any additional mechanisms. 

The rest of this work is organised as follows. Section 2 is a brief introduction 
to quantum predicative programming. The contribution of this work is Section 3 
which introduces a formal framework for specifying, implementing, and analysing 
quantum communication protocols and presents the analysis of two such protocols: 
quantum teleportation and quantum dense coding. Section 4 states conclusions and 
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outlines directions for future research. A short introduction to quantum computing 
is presented in the Appendix A. 

2 Quantum Predicative Programming 

This section introduces the programming theory of our choice — quantum predica- 
tive programming. We briefly introduce parts of the theory necessary for under- 
standing Section 3 of this work. For a course in predicative programming the reader 
is referred to [14]. An introduction to probabilistic predicative programming can 
be found in [15]. Quantum predicative programming is developed in [22,23,21]. 

2.1 Predicative programming 

In predicative programming a specification is a boolean expression. The variables 
in a specification represent the quantities of interest, such as prestate (inputs), 
poststate (outputs), and computation time and space. We use primed variables to 
describe outputs and unprimed variables to describe inputs. For example, speci- 
fication x' = x + 1 states that the final value of x is its initial value plus 1. A 
computation satisfies a specification if, given a prestate, it produces a poststate, 
such that the pair makes the specification true. A specification is implementable if 
for each input state there is at least one output state that satisfies the specification. 

We use standard logical notation for writing specifications: A (conjunction), V 
(disjunction), =>• (logical implication), = (equality, boolean equivalence), / (non- 
equality, non-equivalence), and if then else. The larger operators , < , and 

==>- are the same as =, <, and =>, but with lower precedence. We use standard 
mathematical notation, such as + — x / moddiv. We use lowercase letters for 
variables of interest and uppercase letters for specifications. 

In addition to the above, we use the following notations: a (prestate), a' (post- 
state), ok (a' = a), and x := e (x' = e A y' = y A . . .). The notation ok specifies 
that the values of all variables are unchanged. In the assignment x := e, x is a state 
variable (unprimed) and e is an expression (in unprimed variables) in the domain 
of x. 

If R and S are specifications in variables x, y, . . . , then the sequential composition 
of R and S is defined by 



where R" is obtained from R by substituting all occurrences of primed variables 
x',y',... with double-primed variables x",y",... , and S" is obtained from S by 
substituting all occurrences of unprimed variables x,y, . . . with double-primed vari- 
ables x", y", . . . . 

Various laws can be proved about sequential composition. One of the most 
important ones is the substitution law, which states that for any expression e of the 
prestate, state variable x, and specification P, 



R; S= 3x",y",... -R" A S' 



•n 




x := e ; P = (for x substitute e in P) 
3 
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Specification S is refined by specification P if and only if 5 is satisfied whenever 
P is satisfied, that is V<r, a' ■ S <= P. Given a specification, we are allowed to 
implement an equivalent specification or a stronger one. 

A program is an implemented specification. A good basis for classical (non- 
quantum) programming is provided by: ok, assignment, if then else, sequential 
composition, booleans, numbers, bunches, and functions. Given a specification S, 
we proceed as follows. If S is a program, there is no work to be done. If it is not, we 
build a program P, such that P refines S, i.e. S <= P. The refinement can proceed 
in steps: S , <=...<=i?<S=Q<=P. 

In S -4= P it is possible for S to appear in P. No additional rules are required 
to prove the refinement. For example, it is trivial to prove that 

x > =>• x 1 = <= if x = then ok else [x := x — 1 ; x > =>■ x' = 0) 

The specification says that if the initial value of x is non-negative, its final value 
must be 0. The solution is: if the value of x is zero, do nothing, otherwise decrement 
x and repeat. 

2.2 Probabilistic predicative programming 

A probability is a real number between and 1, inclusive. A distribution is an 
expression whose value is a probability and whose sum over all values of variables 
is 1. Given a distribution of several variables, we can sum out some of the variables 
to obtain a distribution of the rest of the variables. 

To generalise boolean specifications to probabilistic specifications, we use 1 and 
both as numbers and as boolean true and false, respectively. If R and S are 
specifications in variables x,y, . . . , then the definition (1) of sequential composition 
of R and S is generalised to 

R; S= ^i",!,",..,fl"xS" 

where R" and S" are defined as before. 

If p is a probability and R and S are distributions, then 

if p then R else S = p x R + (1 — p) x S 

If S is an implementable deterministic specification and p is a distribution of 
the initial state x, y, then the distribution of the final state is 

p'; s 

Various laws can be proved about sequential composition. One of the most 
important ones, the substitution law, introduced earlier, applies to probabilistic 
specifications as well. 

2.3 Quantum Predicative Programming 

Let C be the set of all complex numbers with the absolute value operator | • | and 
the complex conjugate operator *. Then a state of an n-qubit system is a function 
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ip : 0, ..2 n — ► C, such that ^ x : 0, ..2 n • |^x| 2 1. Here notation i, ..j means from 

(and including) % to (and excluding) j. 

If ip and 4> are two states of an n-qubit system, then their inner product, denoted 
by (ip\(j>}, is defined by: 

(iPlcj)) = : 0, ..2 n • tyx)* x (<^>x) 

A basis of an n-qubit system is a collection of 2 n quantum states &o,..2 n > such 
that : 0, ..2 n • (bi\bj) = (i = j). We adopt the following Dirac-like notation 
for the computational basis: if x is from the domain 0, ..2 n , then x denotes the 
corresponding n-bit binary encoding of x and |x) : 0, ..2 n — ► C is the following 
quantum state: 

|x) = Xi : 0, ..T -(i = x) 
where Ax : D ■ b is a function of a variable x with domain D and body 6. If ip is a 
state of an m-qubit system and is a state of an n-qubit system, then ip ® cp, the 
tensor product of ip and <p, is the following state of a composite m + n-qubit system: 

ip ® (j) = Xi : 0, ..2 m+n • diu 2 n ) x <j>{i mod 2 n ) 

We write <p® n to mean "0 tensored with itself n times" . An operation defined 
on an n-qubit quantum system is a higher-order function, whose domain and range 
are maps from 0, ..2 n to the complex numbers. An identity operation on a state of 
an n-qubit system is defined by 

r = Xtp: 0, ..2 n -► C- V 

For a linear operation A, the adjoint of A, written is the (unique) operation, 
such that for any two states ip and (j), (ip\A(j)) = (A^\(j)). 

The unitary transformations that describe the evolution of an n-qubit quantum 
system are operations U defined on the system, such that U'U = I n . 

In this setting, the tensor product of operators is defined in the usual way. If ip 
is a state of an m-qubit system, ^ is a state of an n-qubit system, and U and V are 
operations defined on m and n-qubit systems, respectively, then the tensor product 
of U and V is defined on an m + n qubit system by 

(E/"®tO(V>®0) = (Ety)®(^) 

To apply an operation U defined on a 1-qubit system to qubit % in a composite 
n-qubit system, we apply the operation U" to the entire system, where U™ is defined 
by: 




i n—i—1 



Suppose we have a system of n qubits in state ip and we measure (observe) it. 
Suppose also that we have a variable r from the domain 0, ..2™, which we use to 
record the result of the measurement, and variables x, y, . . ., which are not affected 
by the measurement. Then the measurement corresponds to a probabilistic specifi- 
cation that gives the probability distribution of ip' and r' (these depend on ip and 
on the type of measurement) and states that the variables x,y, . . . are unchanged. 
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For a general quantum measurement described by a collection M = Mo ..2« of 
measurement operators, which satisfy the completeness equation (see Appendix A), 
the specification is measure a/ ip r, where 

measure m ip r = (if)\M^M r >ip) x ( ip' = — = = | x (a' = a) 

\Ml,M r ^) 4 

where a 1 = a is an abbreviation of (x 1 = x) x (y' = y) x . . . and means "all other 
variables are unchanged". 

Given an arbitrary orthonormal basis B = fco,..2 n > measurement of ip in basis B 

is: 

measures V J r | (V |^)| 2 x = V) x = cr ) 

The simplest and the most commonly used measurement in the computational 
basis is: 

measure tjir = \ipr'\ 2 x (-(// = |r')) x (a' = a) 

In this case the distribution of r' is j^r'l 2 and the distribution of the quantum 
state is: 

^/•ivt'i 2 x (y/ = i r '» 

which is precisely the mixed quantum state that results from the measurement. 

In order to develop quantum programs we need to add to our list of implemented 
things. We add variables of type quantum state as above and we allow the following 
three kinds of operations on these variables. If ip is a state of an n-qubit quantum 
system, r is a natural variable, and M is a collection of measurement operators that 
satisfy the completeness equation, then: 

(i) ip := |0)® n is a program 

(ii) ijj := Uip, where U is a unitary transformation on an n-qubit system, is a 
program 

(iii) measure^ ip r is a program 

where the superscript ® n means "tensored with itself n times" . The special cases of 
measurements are therefore also allowed. 

Some unitary operations that we will use in the later sections are (here x, c : 0, 1): 

= \x) identity 

X\x) = |1 — x) X - Pauli matrix 

Y\x) = (—l) x x % x |1 — x) Y - Pauli matrix 

Z\x) = (—l) x x \x) Z - Pauli matrix 

H\x) = (|0> + {-If x Hadamard 
CNOT\cx) = (I® X c )\cx) controlled-not 

3 Distributed Quantum Systems and Communication 

In predicative programming, to reason about distributed computation we (dis- 
jointly) partition the variables between the processes involved in a computation. 
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Parallel composition is then simply boolean conjunction. For example, consider 
two processes P and Q. P owns integer variables x and y and Q owns an integer 
variable z. Suppose P = x := x + 1 ; y := x and Q = z := —z. Parallel 
composition of P with Q is then simply 



In quantum predicative programming, one needs to reason about distributed 
quantum systems. Recall that if ip is a state of an m-qubit system and (ft is a 
state of an n-qubit system, then ip <g> cj>, the tensor product of ip and <p, is the 
state of a composite m + n-qubit system. On the other hand, given a composite 
m + n-qubit system, it is not always possible to describe it in terms of the tensor 
product of the component m- and n-qubit systems. Such a composed system is 
entangled. Entanglement is one of the most non-classical, most poorly understood, 
and most interesting quantum phenomena. An entangled system is in some sense 
both distributed and shared. It is distributed in the sense that each party can apply 
operations and measurements to only its qubits. It is shared in the sense that the 
actions of one party affect the outcome of the actions of another party. Simple 
partitioning of qubits is therefore insufficient to reason about distributed quantum 
computation. 

The formalism we introduce fully reflects the physical properties of a distributed 
quantum system. We start by partitioning the qubits between the parties involved. 
For example, consider two parties P and Q. P owns the first qubit of the composite 
entangled quantum system ip = |00)/\/2 + |H)/v2 and Q owns the second qubit. 
A specification is a program only if each party computes with its own qubits. In 
our example, 

P = ipQ := Hipo ; measure ipQ p and Q = measure ip\ q 

are programs, if p and q are integer variables owned by P and Q, respectively. Note 
that we cannot write down expressions for ipo and ip\: this is consistent with the 
laws of quantum mechanics as ip is an entangled state. Parties P and Q can access 
only their own qubits: they could in theory be light years apart. 

Sometimes we want to explicitly include partitioning of variables as part of a 
specification. For this purpose, we introduce notation varp to mean the bunch 
of variables that belong to process P. In the above example we can make the 
partitioning of variables explicit with the specification 



We define parallel composition of P and Q which share an n+m quantum system 
in state ip with the first n qubits belonging to P and the other m qubits belonging 
to Q as follows. If 



P\\Q= PAQ= x' = x+lAy' = x + lf\z' 



= —z 



ip ,p : varp /\ip\,q : 



var Q 



Upipo t .. n and Q = Vy..n+ 



rn 



UQlp n ,..n+rn 



where Up is a unitary operation on an n-qubit system and Uq is a unitary operation 
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on an m-qubit system, then 

P\UQ= ^:={U P (E)U Q )^ 

Performing ok is equivalent to performing the identity unitary operation, and 
therefore if 

P = ipo,..n '■= Upipo,..n and Q = ok 

then 

P\\ i ,Q= i> := (Up ® I® m )iP 

Similarly, if 

P = measure A/p ?/> ,..n P and Q = measure Mg ip n ,..n+m q 

where Mp and Mq are a collection of proper measurement operators for n- and 
m-qubit systems, respectively, then 

P lly Q = m.easure Mp ®M Q ip pq 

where pq is the number that corresponds to the binary string pq. 
In our example, 



tp := |00)/V2 + |11)/V2 ; P \ \^Q expand, substitute 

= V := |00)/a/2 + |11)/V2 ; 

measure (Hipo) p \ \^ measure ipi q compose on ip 

; measure (H ® I)ip pq substitute 

= measure (H (8) I)(|00)/v / 2 + 1 11) /a/2) pq apply H ® I 

= measure (|00) + 1 01) + 1 10) — 1 1 1) )/2 pq measure 

= |(|00) + |01) + 1 10) - \U))/2 pq\ 2 x <y = |p'q )) application 
= = |p'q'))/4 



When explicitly specifying partitioning of variables in a parallel composition, it 
is convenient to allow the variables to appear as subscripts on the corresponding 
processes. For example, the specification P^p 0jP \ \^ Qip liq denotes a parallel compo- 
sition of processes P and Q that share an entangled state tp, such that and p 
belong to P and ipi and q belong to Q. 

To reason about communication between processes we use the framework of 
Hehner's calculus ([14]). A named, one-way communication channel c is described 
by an infinite message script M c , an infinite time script T c , and read and write 
cursors r c and w c . The message and time scripts are the list of all messages that 
appear on the channel and the list of corresponding times. The read and write 
cursors specify how many messages have been read from and written to a channel. 
To specify two-way communication, we use two channels. The input and output on 
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channel c are denned by the following operations (here t is the time variable): 



A channel declaration chan c : T-P defines a new channel c with communication 
of type T; the declaration applies to the specification P (here xnat stands for 
naturals extended with oo): 

chan c : T ■ P = 3M C : [oo *T] • 3T C : [oo * real] ■ var r c , w c '■ xnat := • P 

where [oo * T] is an infinite sequence of elements of type T. One useful theorem 
that we use in later examples is the equivalence of communication on a local channel 
with assignment: 



The reader is referred to [14] for a detailed description of formal treatment of clas- 
sical communication in Hehner's calculus. 

When defining a quantum communication channel one must be careful not to 
introduce any unwanted behaviour, such as violation of the no-cloning principle 
(i.e. creation of identical copies of an unknown arbitrary quantum state). For this 
purpose we make the change of ownership of the transported qubit explicit in the 
definition: 

clip = M c w c = tp A T c w c = t /\w' c = w c + l A var'p = vaip\ip A a' = a 
clip = r' c = r c + 1 A ip' = M c r c A var^ = var<g , ip A a' = a 

where c is a quantum communication channel from process P to process Q and 
a' = a is shorthand for "the rest of the variables are unchanged" . 

Now that we allow changing of ownership of the variables, the specification 
a'p = up, "the rest of the variables of process P are unchanged" is defined by 
W : var'p ■ v' = v. 

The declaration of a quantum channel qchan c : qbit ■ P is similar to the decla- 
ration of a local classical channel: 

qchan q : T ■ P = 3M q : [oo * T] ■ 3T q : [oo * real] • var r g , w q : xnat := • P 

Similarly to the above-mentioned theorem, we can prove the equivalence of com- 
munication on a local quantum channel with the change of ownership. If P = clip 
and Q = clip, then (leaving out time) 




= M c w c = e A T c w c = t A w c := w c + 1 

r c := r c + 1 

= M c (r c - 1) 



c output e 
c input 



c 



chan c : T ■ c\e \ \ (c? ; x := c) = 



x := e 



qchan c : qbit ■ P \ \ Q 
= 3M : [oo * qbit] ■ var r, w : xnat := • P \ \ Q 
= 3M : [oo * qbit] ■ var r, w : xnat := 0- 



def. qchan 
expand 



Mw = ip/\w' = w + l/\ var'p = var p\ip 
A var'g = varQ, ipf\r' = r + lf\ip' = Mr 



initialisation 
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— - 3M : [oo * qbit] ■ var r, w : xnat- 

MO = ip A w' = 1 A varp = varp\^ 

A varg = varQ ,ip/\r' = l/\ip= MO simplify 
= var'p = varp\?/> A var'g = varg, tp A a' = a 

3.1 Quantum teleportation 

Quantum teleportation is the most famous quantum communication protocol. Its 
description first appeared in a seminal article by Bennett et al in 1993 ([9]), it 
has since been extensively used as part of more complex quantum communication 
protocols, and has received much attention in experimental research. The protocol 
achieves transmission of quantum information by utilising only a classical commu- 
nication channel and an entangled pair of qubits: no qubits are sent in the process. 

The protocol: Alice and Bob share an entangled pair of qubits in the state 
(| 00) + |ll))/\/2. Alice has some qubit tp in her possession (she may not know the 
state of the qubit) that she wishes to transfer to Bob. Alice starts by interacting 
the qubit she wishes to teleport with her half of the entangled pair (she applies a 
controlled- not followed by a Hadamard transform) and measuring her two qubits. 
She then sends the results of her measurements to Bob (two classical bits). Bob 
receives the two classical bits and, depending of their values, applies one of the three 
Pauli operators or the identity to his qubit. Surprisingly, he has recovered the state 
Alice wished to teleport. 

The protocol is usually described informally, by using a diagram as in Figure 1 4 . 
Such a description is insufficient, in part since it only describes the evolution of 
the quantum system and does not specify the distribution of the system nor the 
communication. Alternatively, the description of the protocol is given informally, 
in English. Our goal is to formally define and prove correctness of the quantum 
teleportation protocol. Some approaches proposed in the literature (e.g. [26]) define 
teleportation as a program that implements a specification of the form (j)' = ip. 
We point out that this specification may as well be implemented by a program 
that involves sending a qubit on a quantum channel, which is not teleportation. 
Furthermore, the specification does not mention that two classical bits are sent on 
a classical channel, which is an important part of the specification of teleportation. 
Similarly, it is important to specify that a pair of maximally entangled qubits is 
required. 

To formalise the quantum teleportation protocol we let c be the number of 
classical bits sent on a communication channel and q be the number of quantum 
bits sent. The formal specification of quantum teleportation is: 

S = 0oi : var Alice A 4> 2 : varp ofe A 

<M..3 = (a x |0> + x |1)) <g) (|00> + \n))/V2 
=>. (f>' 2 = a x |0) + (3 x |1) A c' = c + 2 A q' = q 

The specification says that if the computation starts with a qubit (specified in 

4 The figure is generated with qasm2pdf 
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z 



Fig. 1. Quantum teleportation protocol 



the most general form) in Alice's possession and if Alice and Bob share a maximally 
entangled state ( 1 00) + |ll))/v2, then at the end of the computation the qubit is 
teleported to Bob at a cost of 2 classical bits of communication and qubits of 
communication. The specification does not restrict the quantum system to three 
qubits, so that teleportation can be a part of a bigger computation. 
The well-known solution is the following parallel program: 

P = chan ch : bit ■ Alice aoAl ^ n \\^ Bob b0jblttf>2 

where Alice = 0oi := CNOTcfioi ; fa := Hfa ; measure fax ao&i ; 
c := c + 1 ; chlao ; c := c + 1 ; ch\a\ 
and Bob = ch? ; b := ch ; ch? ; h := ch ; fa := Z b °X bl fa 



That is, two processes, Alice and Bob, partition a 3-qubit quantum system <j), so 
that Alice owns the first qubit (the one she wants to teleport) and the second qubit 
and Bob owns the third qubit. Alice can write to a local classical communication 
channel ch and Bob can read from it. Finally, and a\ are two bits that belong to 
Alice, and &o an d &i are two bits that belong to Bob. The process Alice performs 
local operations and measurements and sends two classical bits on the channel. The 
process Bob reads from the channel and performs local operations. 

Our goal is to prove that the program P implements the specification S. We 
first note the following equivalence: 



P => 5 def. S 

P A 0oi : var Alice A fa ■ var Bof) A 
0o,..3 = (a X |0> + X |1)) ® (| 00) + |11»/V2 
4 = a x |0) + /? x 1 1) A c' = c + 2 A g' = q simplification 
P A = (a x |0) + (3 x |1)) ® (|00) + |11) 
0' 2 = a x |0) + x |1) A c' = c + 2 A q' = 



Next, we simplify P to prove the above implication. With implicit partitioning 
of variables (as it does not change) : 

chan ch : bit ■ (((/>oi := CNOT4>q\ ; 4>q := Hfio ; measure 0oi 00^1 ! 
c := c + 1 ; c/i!ao ; c := c + 1 ; c/i!ai) 
||^ (c/i? ; b := c/i ; c/i? ; b\ := c/i ; <j) 2 := Z^X^fa)) 
= substitute, H on first qubit 

11 



Tafliovich 



chan ch : bit ■ ((measure H (g) I{CNOT4>oi) a^a\ ; 

c := c + 1 ; chlao ; c := c + 1 ; ch\a\) 
||^ (c/i? ; b := c/i ; c/i? ; b x := c/i ; <j) 2 := Z 6 °X b > 2 )) 
— - parallel composition, simplification 

chan ch : bit- 
measured H <£> I <8> I(CNOT <g> I(j>) aoa\ ; 

((c := c + 1 ; chlao I c := c + 1 ; c/i!ai) || (c/i? ; bo := c/i ; c/i? ; b\ := ch)) ; 
<j):=I®I®Z ho (I®I® X bl (p) 
= classical channel 

measure 01 H (g> I <g) I(CNOT <g> J^>) a ai ; 
c' = c + 2 A 6' = a A b[ = a\ A c/ = a ; 
: = I ® J ^ Z fco (J (8) J g> 0) 

Next we notice that the first line in the above specification (which is, in fact, 
the effect of Alice's actions) conjoined with the specification of the initial state 
of the quantum system, result in the following distribution over the states of the 
computation: 

4>' = \a'oa[} ® (a x \a[) + (-l) a o x X |1 - a' x ))/A 

That is, with probability 1/4 the quantum system is in state 1 00) <g> (a x |0) + 
x |1)) and the values of Alice's bits are ao = and a\ = 0; with probability 1/4 
the quantum system is in state 1 01) (g> (a x |1) + x |0)) and the values of Alice's 
bits are ao = and a\ = 1; etc. 

To prove this formally, we first note that: 

H®I®I(CNOT®I({a x |0) +/3 x |1)) (|00> + |ll»/\/2)) 
= apply CNOT 

H®I®I(ax |000) +/3 x |110) + a x |011) + /3 x |101))/\/2 
= apply H 

a x (|0) + |1» ® |00)/2 + x (|0> - |1)) ® |10)/2+ 
a x (|0) + |1» ® |ll)/2 + x (|0> - |1)) ® |01)/2 
= rearrange terms 

|00) ® (a x |0) + x |l))/2 + |01) 8) (a X |1) + X |0))/2+ 
1 10) 8) (a X |0) -/3 X \l))/2 + |11) 8) (a X |1) - X |0))/2 

Therefore, measurement of the first two qubits of the above state in the compu- 
tational basis gives: 

measure^ (|00) ® {a x |0) + x |l))/2 + |01) (g> (a x |1) + x |0))/2+ 
1 10) ® (a x |0) - /3 x |l))/2 + |11) g> (a x |1) - x |0))/2) 
a ai 

= 0' = lada'j) (g> (a x |ai) + (-l) a ° x /? x |1 - ai))/4 
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Let Q be the specification of the initial state of the quantum system: 

Q = (f> = (a x |0) + x |1» ® (|00> + \11))/V2 
Putting it all together, we get: 
QAP 

= Q x (measured H ig) I <g) I(CNOT <g) a ai ; 

c' = c + 2 A b' = a A &i = a\ A cr' = a ; 

$ := I ® I ® Z ho {I ® I ® X bl (j>)) 
= Qx(f)' = |a ai) ® (a x |ai) + (-l) a o x /? x |1 - ai))/4 ; 

c = c + 2 A b' Q = ao A = a\ A cr' = a ; 

:= I (g> J ^ Z fco (7 <g) / ® X fel 0) 
= Q x (c' = c + 2) x (6' = a' ) x (b[ = a[) X (a' = a) x 

0' = / ® / ® Z fe o (/ ® I ® 

(|ft&6i> ® (a x K) + (-1) 6 ° x p x |1 - 6i»/4)) 
= Q x (c = c + 2) x (6' = a' ) x (&£ = oi) X (<r' = a) x 

/ = J®I®^(IW®(« X |0) + (-l) b » x/3x |l})/4 
= Q x (c = c + 2) x (6' = a' ) x (&£ = oi) X (<r' = a) x 

(^' = |6 / 6' 1 )®(ax|0)+/3x|l))/4) 
< (c = c + 2) x (q =q)x {<f>' 2 = a x |0) + (3 x |1)) 
= 5 

where < is the generalisation of ==>■ for probabilistic specification (see [15]). 

This example shows formalisation and analysis of an LOCC (local operations, 
classical communication) quantum communication protocol. We now turn to our 
attention to a protocol which involves a quantum communication channel. 

3.2 Quantum dense coding 

The quantum dense coding (sometimes called super-dense coding) protocol is less 
famous than the quantum teleportation protocol, but it is no less important. It 
achieves the transfer of 2 bits of classical information by sending 1 bit of quantum 
information and utilising 1 entangled pair of qubits. That is, its goal is the opposite 
of that of the quantum teleportation protocol. 

Just as with teleportation, the protocol is usually described informally: either 
with a diagram or in English. We formalise the specification of the protocol by 
using the same variables as in section 3.1: 

S = oo,oi, 4>o ■ var AUce A &o,&i>0i : var Bofe A <j> i = (|00) + \ll))/y/2 
=> b' Q = ao A b'i = a\ A c = c A q = q + 1 

The specification says that if the computation starts with Alice and Bob sharing 
a maximally entangled state, with classical bits ao and a\ in Alice's possession and 



one point law, 
as above 
sequential 
composition, 
one point law 

apply 
apply Z b 'o 
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60 and b\ in Bob's possession, then at the end of the computation Bob has the values 
of Alice's classical bits, at a cost of sending no bits on a classical channel and one 
qubit on a quantum channel. The program for the protocol is: 

P = qchan qch : qbit ■ Alice ao , ai ^ ||^ Bob^^^ 
where Alice = if ao = a\ = then ok 

else if ao = A a\ = 1 then 4>q := Xcfro 
else if ao = 1 A a\ = then 0o := ZcpQ 
else 4> := Yfo ; 
q := q + 1 ; aca!0 o 
and Bob = qch?(j)Q ; := CNOTcf) ; 0o := H<J)q ; measure (/> 6061 

That is, Alice applies one of the three Pauli operators or an identity to her half of 
the entangled pair, depending on the values of her classical bits, and sends her qubit 
to Bob. Bob receives the qubit, applies a controlled- not followed by a Hadamard, 
and measures the two qubits in his possession. We now show that the program P 
implements the specification S. First, we simplify the processes Alice and Bob: 

Alice = fa : = (-i)^ xa ^ x Z a °(X ai <)) ) ; q := q + 1 ; qchlfo (math) 
Bob = qch?<po ; measure H ® I(CNOT(f)) b$b\ (substitutions) 

We now look at their parallel composition: 

P = qchan qch : qbit ■ Alice ao ^ au ^ ||^ Bob^^^ 
= qchan qch : qbit- 

((^0 := Hn xai x Z a °(X a ^ ) ;q:=q + l; qchlfo)^^ 
||^ (qch?(f> ; measure H ® I{CNOT4>) &o&i)6 o ,bi,0i) 
quantum channel 

= (f> ■= (-i^oxax x z a £ jproi 3 . 

q' = q + 1 A var^, ice = var^icA^o A var' Bofe = var Bo6 , (j) A a' = a ; 
measure # (g> I(CNOT 0) 6 6i 
sequential composition 
= (measure (-i) a « xa i x H ® I(CNOT {Z a ° ® I(X ai ® 70))) 6 fei)x 
(g' = q + 1) x (var^ ice = a , at) x (var' Bofe = b Q , bi,if>oM x (<r' = <r) 

Next, we note that the quantum state being measured is: 

H) aoXai x H <g> I(CNOT (Z a ° ®I{X ai ®I(|00) + 111})/^))) 
= (a = 0)x(oi = 0)xff» I(CNOT (|00) + |ll))/>/2)+ 

(a = 0) x (ai = 1) x H® I{CNOT (X ® Z(|00> + |11))/V2))+ 
(a = 1) x (01 = 0) x H® I{CNOT (Z ® J(|00) + \ll))/V2))+ 
(a = 1) x (ai = 1) x (-i) x H ® I{CNOT (Z ® I(X ® J(|00) + |11))/V2))) 
apply X 
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= (oo 


= 0) x (ai 


= 0) 


x 77 ® I(CNOT (|00> + \11))/V2)+ 


(ao 


= 0) x (ai 


= 1) 


x H (g 


I(CNOT (| 10) + |01))/v / 2)+ 




= 1) x (ai 
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x 77<g 
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= 0) 
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= 0) x (ai 


= 1) 
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= 1) x (ai 


= 0) 
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= 1) x (ai 


= 1) 
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x |11) 


= H 


) aoXai x |a ai) 







Putting it all together, we get: 

(^oi = (|00) + |11))/V2)AP 
(measure (— i)°° X01 x |a ai) &o&l) x (g' = g + l)x 

( var We = «o, ai) x (var' Bob = b , h, ipo^i) X {?' = o") 
= (</>' = |&o&i» x (b'o = «o) x $ = oi) x (g' = q + l)x 

( var AZice = ao, ai) x (var' Bob = 6 , &i, V>o, x (cr' = a) 
< 5 

This example shows formalisation and analysis of a quantum communication 
protocol which involves a quantum communication channel. 



as above 



measure 



4 Conclusion and Future Work 

We have presented a formal framework for specifying, implementing, and analysing 
quantum communication protocols. The analysis is not limited to reasoning about 
the data sent or received during the execution of the protocol. We provide tools to 
formally prove complexity of the communication protocols, such as the number of 
classical and quantum bits sent during the execution. We have applied our approach 
to two important quantum communication protocols: quantum teleportation and 
quantum dense coding. The resulting formal proofs are short: in fact, the proofs 
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in Sections 3.1 and 3.2 are only slightly longer than the informal reasoning and 
calculations in [18] . The proofs are easy to read, the use of Dirac-like notation makes 
the expressions of quantum states look familiar, while providing a formal treatment 
that fits in the overall framework. Finally, the formal proofs are checkable by a 
computer (although we currently do not have suitable software implemented), thus 
providing a measure of confidence in the analysis of correctness and complexity of 
the protocols. 

Current research focuses on formal reasoning about complexity of distributed 
quantum algorithms (e.g. [25]). Future work involves formalising quantum crypto- 
graphic protocols, such as BB84 [8], in our framework and providing formal analysis 
of these protocols. 
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A Quantum Computation 

In this section we introduce the basic concepts of quantum mechanics, as they 
pertain to the quantum systems that we consider for quantum computation. The 
discussion of the underlying physical processes, spin-^-particles, etc. is not our 
interest. We are concerned with the model for quantum computation only. A 
reader not familiar with quantum computing can consult [18] for a comprehensive 
introduction to the field. 

The Dirac notation, invented by Paul Dirac, is often used in quantum mechanics. 
In this notation a vector v (a column vector by convention) is written inside a ket: 
\v). The dual vector of \v) is (v\, written inside a bra. The inner products are 
bra-kets {v\w). For n-dimensional vectors \u) and \v) and m-dimensional vector 
\w), the value of the inner product (u\v) is a scalar and the outer product operator 
corresponds to an m by n matrix. The Dirac notation clearly distinguishes 
vectors from operators and scalars, and makes it possible to write operators directly 
as combinations of bras and kets. 

In quantum mechanics, the vector spaces of interest are the Hilbert spaces of 
dimension 2" for some n G N. A convenient orthonormal basis is what is called a 
computational basis, in which we label 2 n basis vectors using binary strings of length 
n as follows: if s is an n-bit string which corresponds to the number x s , then \s) is 
a 2 n -bit (column) vector with 1 in position x s and everywhere else. The tensor 
product \i) <S> \j) can be written simply as \ij). An arbitrary vector in a Hilbert 
space can be written as a weighted sum of the computational basis vectors. 

Postulate 1 (state space) Associated to any isolated physical system is a Hilbert 
space, known as the state space of the system. The system is completely described 
by its state vector, which is a unit vector in the system's state space. 

Postulate 2 (evolution) The evolution of a closed quantum system is described 
by a unitary transformation. 
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Postulate 3 (measurement) Quantum measurements are described by a collec- 
tion {M m } of measurement operators, which act on the state space of the system 
being measured. The index m refers to the possible measurement outcomes. If 
the state of the system immediately prior to the measurement is described by a 
vector then the probability of obtaining result m is (ip\M m M m \if)) , in which 
case the state of the system immediately after the measurement is described by 
the vector M m \j>) The measurement operators satisfy the completeness 

equation ^ m ■ M m M m = I. 

An important special class of measurements is projective measurements, which 
are equivalent to general measurements provided that we also have the ability to 
perform unitary transformations. 

A projective measurement is described by an observable M, which is a Hermitian 
operator on the state space of the system being measured. This observable has 
a spectral decomposition M = Yl m ' x Pm, where P m is the projector onto 
the eigenspace of M with eigenvalue A m , which corresponds to the outcome of 
the measurement. The probability of measuring m is (ijj\P m \ip), in which case 
immediately after the measurement the system is found in the state Pm M 

\J{f\Pm\i>) 

Given an orthonormal basis \v m ), < m < 2 n , measurement with respect to 
this basis is the corresponding projective measurement given by the observable 
M = Yl m ' x Pm, where the projectors are P m = |f m ) (^mi- 
Measurement with respect to the computational basis is the simplest and the 
most commonly used class of measurements. In terms of the basis |m), < m < 2 n , 
the projectors are P m = \m){m\ and (^|P m |^>) = l^ml 2 - The state of the system 
immediately after measuring m is \m). 

For example, measuring a single qubit in the state ax |0) + J3 x |1) results in 
the outcome with probability \a\ 2 and outcome 1 with probability |/3| 2 . The state 
of the system immediately after the measurement is |0) or |1), respectively. 

Suppose the result of the measurement is ignored and we continue the com- 
putation. In this case the system is said to be in a mixed state. A mixed state 
is not the actual physical state of the system. Rather it describes our knowl- 
edge of the state the system is in. In the above example, the mixed state is 
expressed by the equation = \a\ 2 x {|0)} + \(3\ 2 x {|1)}. The equation is 
meant to say that is |0) with probability \a\ 2 and it is |1) with probability 
\(5\ 2 . An application of operation U to the mixed state results in another mixed 
state, U(\a\ 2 x {|0>} + |/3| 2 x {|1>}) = \a\ 2 x {U\0)} + \(3\ 2 x {U\l)}. 

Postulate 4 (composite systems) The state space of a composite physical sys- 
tem is the tensor product of the state spaces of the component systems. If we 
have systems numbered up to and excluding n, and each system i, < i < n, 
is prepared in the state \ipi), then the joint state of the composite system is 
|^o) ® <8> ■ ■ ■ ® h/>n-l}- 

While we can always describe a composite system given descriptions of the com- 
ponent systems, the reverse is not true. Indeed, given a state vector that describes 
a composite system, it may not be possible to factor it to obtain the state vectors of 
the component systems. A well-known example is the state \tp) = 1 00) / \/2+|ll) /v2. 
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Such a state is called an entangled state. 

Just as it may not be possible to represent the state of a multi-qubit system 
as tensor product of its component systems, it may not be possible to represent 
an operation on a composite system as a tensor product of single-qubit operations 
on the component systems. Consider, for example, "controlled-NOT" (CNOT) 
operation on two qubits defined by 

CNOT(\0) ® \x}) = |0> ® \x) 
CNOT{\\) ® \x)) = |1) ® |l-x) 

where i £ 0,1. It can be shown that there are no two single-qubit operations Uq 
and Ux, such that CNOT = U Q ®U 1 . 
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